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Commissioner for Patents 
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REQUEST FOR CERTIFICATE 
OF CORRECTION UNDER 37 C.F.R. §1,322 



Sir/Madam: 



Patentee respectfully requests the correction of errors found in the above-captioned 
patent. Specifically, there is a typographical error and errors of omission in issued U.S. Patent 
No. 6,816,821. 

In column 4, lines 7-10 currently read as shown below: 

where I is an input and neither TO nor Tl depend on 1, then I can be generated by 
parameterization of this equation to provide a new input J which satisfies the 
relation (Emphasis added) 

However, on page 5 of the application as filed the same text reads: 

where I is an input and neither TO nor Tl depend on I, then I can be generated by 
parameterization of this equation to provide a new input J which satisfies the 
relation (Emphasis added) 

The letter "1" identifying the input in issued U.S. Patent No. 6,816,821 is incorrect. As 
can be seen on page 5 of the applicafion as filed, the letter "I" is used to identify the input. No 
amendment was made by either Patentee or the Examiner changing the "I" to "1". 
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ArtUnit: 2749 



In column 6, lines 32-40 of issued U.S. Patent No. 6,816,821 currently read: 

A processor 400 further includes a forming device 440 which receives the state 
variables of the real/reverse models from the third store 300 and also receives the 
transition functions of the reverse machine from the fourth store 500 and acts to 
substitute the state variables of the reverse machine with the transition functions 
of the reverse machine to provide a new set of states which represent the pre- 
image of the reverse system thus the post-image of the second system. This data 
is stored in fifth store 600. (Emphasis added) 

However, in an amendment filed on December 8, 2003 the word "second" was replaced 
with the word "real." This paragraph found in column 5, lines 32-40, as amended should read as 
shown below. 

A processor 400 further includes a forming device 440 which receives the state 
variables of the real/reverse models from the third store 300 and also receives the 
transition functions of the reverse machine from the fourth store 500 and acts to 
substitute the state variables of the reverse machine with the transition functions 
of the reverse machine to provide a new set of states which represent the pre- 
image of the reverse system thus the post-image of the real system. This data is 
stored in fifth store 600. (Emphasis added) 



The final paragraph of the written description in column 6, lines 7-11, of U.S. Patent No. 
6,816,821 reads: 

The above description is of preferred and exemplary embodiment(s) of the present 
invention only and is to enable a full understanding of the invention while not 
intending to limit the invention can be ascertained from the following claims. 

At the time the application was filed, this paragraph found on page 9, lines 1-3, read as 
shown below: 

The above description is of preferred and exemplary embodiment(s) of the present 
invention only and is to enable a full understanding of the invention while not 
intending to limit the invention. The scope of the invention can be ascertained 
from the following claims: 

No such amendment was made by either the Examiner or by Patentee deleting this text. 

In support of this Request Patentee submits herewith a highlighted copy of pages 5 and 9 
of the application as filed, pages 3 and 8 of the amendment filed on December 8, 2003 and 
columns 4, 5 and 6 of U.S. 6,816,821. 
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Patentee requests that a Certificate of Correction be granted in U.S. Letters Patent No. 
6,816,821 as specified herein and on the attached Certificate of Correction form SB/44. 

The corrections requested do not involve change in the patent that constitutes new matter 
or would require reexamination. Therefore, it is respectfully requested that the corrections be 
made and that a Certificate of Correction be issued. 

Patentee respectfully submits that, since the error for which a Certificate of Correction is 
sought was the result of Patent Office mistake, no fee is due. However, if the Examiner deems a 
fee necessary, the fee may be charged to the account of the undersigned, Deposit Account No. 



Should any questions arise concerning the foregoing, please contact the undersigned at 
the telephone number listed below. 



I hereby certify that this document is being placed in the 
United States mail with first-class postage attached, 
addressed to Certificate of Correction Branch, Commissioner 
for Patepts, P.O. Box 1450, Alexandria, VA 22313-1450 on 
the /i^y of November, 2004. 
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FIG. 3 shows a conceptual flow diagram of a present From our British Application No 9624935.4. which is 

technique. incorporated by reference as if fully set forth herein, it was 

In the figures, like reference numerals refer to like parts. shown that if a constraint is given by 

DETAILED DESCRIPTION OF THE 5 (not I AND TO) OR (i and ti) (3) 
PREFERRED EMBODIMENT 

In this example, a two bit counter is used to demonstrate where I is an input and neither TO nor Tl depend on 1. 

a technique for modeling a reverse machine. It will be clear then I can be generated by parameterization of this 

to one skilled in the art that if the real machine is a equation to provide a new input J which satisfies the 

conventional counter which counts up, then the reverse 10 relation 

machine will be a machine which counts down. 

T .11 , i. , 1 -I, J • .u *u * f I=(NOT JANDNOTT0)OR(J ANDTl) (4) 

It Will also be clear to one skilled m the art that for the 

simplified examples selected here, properties would nor- ^ equation for bO' is now generated using the constraint 

mally be proved by using only a pre-image calculation. (i) parar^eterization technique so that: 

Post-image calculation could be used for example to calcu- 15 ^^^^^^^ W' AND NOT [bO=l]) OR (bO" AND [bO=0]) 

late the set of reachable states, namely all states which could _KjfYr hn 

be reached by a particular machine. In this situation, a 7 : " . . . • - 

typical method would be to start with a set of initial states, Substitutmg this equation m constraint (2) gives: 

calculate the post-image and add the states resulting in the bl=(bO AND bl') OR (NOT bO AND NOT bl') or. 

post-image to the original set. This would then be repeated 20 equivalently: [[-]] 

until no new states were found and the resultant would be the (bl'[D]] AND [ba=bl]) OR (NOT bl* AND NOT [bO=bl]) 

set of reachable states. By using this equation, an equation for bl' can be gen- 

Although it will be clear to one skilled in the art that for erated by the parameterization technique, whereby: 

a two bit counter have states (0,0), (0,1 ), (1,0) and (1,1) the bl'=(NOT bl" AND [bO=bl]) OR (bl" AND [bO=bl]) 

set of reachable states would comprise the set of all these thus bl'=[bO=bl] 

states, the following description gives an example of the The transitions of the reverse machine are now such that 

construction of a reverse machine which enables the use of the value of bO on the next cycle is calculated as NOT bO and 

pre-image calculation on that reverse machine to prove this. the value of bl on the next cycle is calculated as bO=bl. 

Referring to FIG. 1, a two bit counter has four states SO, By substituting in the relationship (3) above: 

SI, S2 and S3. The transition from SO to SI is TOl the bl'=(bO AND bl) or (NOT bO AND NOT bl). 

transition from state SI to state S2 is T12, the transition from Thus, the transition functions for the reverse machine give 

S2 to S3 is T23 and the transition from S3 to SO is T30. the following relationships: For bit 0: After a transition in the 

At state SO, the bits of the counter are both equal to zero forward direction for the reverse machine, the new value of 

(i.e. bO=0 and bl=0, where bO is the least significant bit and bit 0 will be true if the starting value of bit 0 were false, 

bl is the most significant bit). In state SI, the counter has In the context of the real machine, as has previously been 

bO=l and bl=0, in state S2 bO=0 and bl=l, and in state S3 explained, a forward transition of the reverse machine is 

bl=l and bO=l identical to a reverse transition of the real machine. Thus, the 

The state transition functions are formed as follows: above can be restated as: 

1. For the least significant bit, a transition from one state 40 The previous value of the bit 0 of the real machine is true 
to the next causes the least significant bit to be inverted, i.e. if he* present value of bit 0 of the real machine is false. 

bO=NOT bO. ^°t- bit 1: Using the bit 0 relationship above: the previous 

2. For the most significant bit, this has a value of logic 1. value of bit 1 for the real machine is true if the present bit 
i.e. true where the previous state is SI or S2. For SI. bO is 0 and the present bit 1 are both true or if the present value 
true and bl is false and for S2 bO is false and bl is true. Thus, 45 ^ Ipresent value of bit 1 arc both false. 

bl=(NOT bO AND bl) OR (bO AND NOT bl) generally, in a model checker based on the transition 

As applied to this counter, an example of the use of the ^l^tion the formula for the calculation of the post-image of 

invention is to prove that only a transition from state SI can f set of states is very smular tothe fbrmda for the calcu- 

directly result hi state S2, 1^^°" pre-image (pre(X)=3S': X[S:=S] & R and 

The invention accordingly provides a method and appa- 50 Post(XH3S: X & R) [S':=S]), where the following notation 

ratus f or synthesizing a reverse model of a finite state appues: 

machine. This wiU be demonstrated using the finite state X[y:=E] substitutes the expressions E for the variables V 

machine shown in FIG. 1, i.e. synthesizing a reverse counter. ^ the predicate (X) 

To do this, it is first necessary to note that for a reverse 3V:X existential quantification of the variables V in the 

machine, transitions would take place in the reverse direc- 55 predicate X. 

tion to those shown in HO. 1. Thus, for the reverse machine. However, in a model checker based on transition 

the next state of that reverse machine is in fact the previous functions, the post-image formula is complicated and diffi- 

state of the real machine. ITius, after a transition from bO in cult to implement efl&ciently. This section will show how to 

the reverse machine, the result is a new value equal to bO' provide transition functions for the reverse machine (i.e. one 

and a transition in the reverse machine from bl results in a 60 in which transitions go from the current state to the previous 

new value of bl* where the notation indicates the state), and therefore the pre-image of the reverse system will 

previous state of the real machine. be the post-image of the original system. 

Applying the transition functions of the real state machine Let the state variables and transition functions of the 

to the transitions of the reverse machine to form constraints: machine be S and T (observation functions are not 

65 considered), then the reverse system is constructed as fol- 

bO=NOT bO* (I) lows. First note that S' (the next-state variables of the reverse 

bi=(NOT bO* AND bl*) OR 0)0' AND NOT bl') (2) System) correspond to the previous states of the original 
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system. Beginning with the transitions of the reverse system novel technique may specifically be used for testing elec- 

being T, the transition functions of the original system are tronic circuits, testing logic circuits, including microproces- 

used to constrain them. Thus, for each state s and transition sors. In general, the described method and device can be 

t, there is a constraint S=t[S;=S']. Call the set of constraints used for testing any mechanistic system in which states 

C. For each constraint, the parameterization E over the 5 occur and transiuons between the states occur on a clocked 

variables S', is calculated and this is substituted in the or a time-dependent basis. 

transition functions and the remaining constraints. The above description is of preferred and exemplary 

The parameterization is an idempotent parameterization embodiment(s) of the present invention only and is to enable 

i.e. a parameterization which after being affected, leaves the a fiill understanding of the invention while not intending to 

relationship entirely unaltered. 10 limit the invention can be ascertained from the following 

Referring to HG. 2, a first store (memory) 100 stores bits claims. 

representative of transition functions of a system. A second What is claimed is: 

store 200 stores bits representative of estimated transition 1. A method of synthesizing a reverse model of a finite 

. function of a reverse model of said system, the estimate state machine, the method comprising: 

being derived from knowledge of the next- state variables of 15 transforming ^a. transition function of a state machine 

the reverse system, which of course correspond to the model of said finite state machine into a constraint on 

previous state variables of the original system. A third store the reverse model, wherein the reverse model is a 

300 stores bits representative of the set of state variables of reverse model of the state machine model; and 

the system, which necessarily is also the set of state vari- applying a parameterization of said constraint to all 

ables of the reverse model. 20 transitions of the reverse model. 

A processor 400 has a logical transforming device 410 2. The method as claimed in claim 1 wherein said finite 

which receives the transition functions of the real machine ^^^^ machine includes a logic circuits, 

from the first store 100 and transforms the transition func- 3 -Yhe method as claimed in claim 1 wherein said finite 

tions into constraints on the reverse model. The processor s^^te machine includes a microprocessor, 

further has a parameterization processing device 420 for 25 4 ^ method of calculating a post-image in a finite state 

calculating for each constraint the parameterization over the machine, the method comprising: 

variables of die reverse machine which are then applied to ^ ^^^^ ^^^^1 ^^^^ ^^^^^ 

the estimated tramiuon functions of the reverse machine m ^^^^^^ ^^^^^ ^^^^1 ^ ^^^^^^^ ^^^^1 ^ 

applymg means 430, applymg means 430 provides an ^^^^ ^^^^j ^^^^ 

output to a fourth store 500 which stores the actual transiuon 30 , , . . . ^ , u • *u 

functions of the reverse model. calculatmg a pre-image m said reverse model, wherem the 

A processor 400 further includes a forming device 440 pre-image m said reverse model is equivalent to the 

which receives the state variables of the real/reverse models , post-image m said fimte state machine, 

from the third store 300 and also receives the transition 5. The method as claimed m claim 4 wherem said fimte 

l^inctions of the reverse machine from the fourtii store 500 35 machine includes a logic cn-cuits^ 

and acts to substitute the state variables of the reverse ^ The method as claimed m claim 4 wherem said fimte 

machine with the transition functions of the reverse machine machme includes a microprocessor, 

to provide a new set of states which represent the pre-image , 7. The method of claim 4 ftoher compnsing idenufying 

of the reverse system tiius the post-image of die second ^^^J,^ charactenzauon of a model of said fimte state 

system. This data is stored in fifth store 600. 40 ^^^f^ transitions of said finite state machine and revers- 

Referring to HG. 3, die metiiod of the invention, as transitions to form potential transitions of a reverse 

described above, involves forming a model of die reverse „ ^ ^. ^ ^ , - a ^ ^. . . 

machine and dien applying as inputs to the model of the . ^ J^^ ^ furdier compnsing ex^^^^^ 

reverse machine, outputs of die real machine so as to ^ charactenzation of a model of said fimte state 

determine what inputs in die real machine could give rise to 45 ^^^^^^^ T^^i^^." 

those outputs. It is dierefore necessary to provide an accurate ^ ^ syndiesizmg a reverse model of a fimte 

model of die reverse machine and diis part of die inventive rmchmt. die device compnsmg: 

method is shown in FIG. 3. ^ ^^^^^ storing bits representative of transition fiinc- 

Referring to FIG. 3, a complete description of die real ^ot^s of a state machine model of said finite state 

machine 1000 is accessed and processed to extract the state 50 machine; 

transitions 1002 using a processing engine 1001. A second a second store storing bits representative of an estimate of 
processing engine 1003 also accesses die description 1000 to transition functions of said reverse model; and 
provide the transition functions 1004 of the re^ machine. A a processing system comprising 
further processing stage 1005 reverses the transitions of the a logical device for transforming said transition fune- 
real machine to provide an output 1006 of reverse transi- 55 tions of the state machine model of said finite state 
tions. The transition ftmctions in box 1004 are processed machine into constraints on said reverse model, 
1007 to as to transform the transition functions of the real wherein the reverse model is a reverse model of the 
machine into constraints and a parameterization of the state machine model; and 

constraints is applied in stage 1008 to each and all of the a parameterization processor for applying a parameter- 
reverse transitions to thereby form the model of the reverse 60 ization of said constraints to said estimate of transi- 
. machine 1010. As reported ai)ove, by applying the outputs of tion functions of said reverse model to form transi- 
the real machine as inputs to the model of the reverse tion functions of said reverse model, 
machine, the inputs to the real machine can be discovered, 10. A device as claimed in claim 9 wherein said estimate 
The described method and device has a large number of of transition functions of said reverse model comprises 
applications such as deriving properties of a control system 65 previous state variables of said finite state machine, 
using a model of the system or deriving properties of a 11. The device as claimed in claim 9 wherein said finite 
hardware system using a model of the system. The described state machine includes a logic circuits. 




^bl=(NOT bO AND bl) OR (bO AND NOT bl). 

As applied to this counter, an example of the use of the invention is to prove that only a 



transition from state SI can directly result in state S2. 

The invention accordingly provides a method and apparatus f or synthesizing a reverse 
model of a finite state machine. This will be demonstrated using the finite state machine shown 
in Figure 1, i.e. synthesizing a reverse counter. 

To do this, it is first necessary to note that for a reverse machine, transitions would take 
place in the reverse direction to those shown in Figure 1 . Thus, for the reverse machine, the next 
state of that reverse machine is in fact the previous state of the real machine. Thus, after a 
transition from bO in the reverse machine, the result is a new value equal to bO' and a transition 
in the reverse machine from bl results in a new value of bl' where the notation " ' " indicates the 
previous state of the real machine. 

Applying the transition functions of the real state machine to the transitions of the reverse 
machine to form constraints: 



From our British Application No 9624935.4, which is incorporated by reference as if 
fully set forth herein, it was shown that if a constraint is given by 



bl = (NOT bO' AND bl') OR (bO' AND NOT bl') 



bO=NOT bO' 



(1) 
(2) 



(NOT I AND TO) OR (I AND Tl) 

where I is an input and neither TO nor Tl depend on I, then I can be generated by 



(3) 



parameterization of this equation to provide a new input J which satisfies the relation 



■J 



I = (NOT J AND NOT TO) OR (JANDTl) 



(4) 



An equation for bO' is now generated using the constraint (1) and the parameterization 
technique SO that: 

bO' = (NOT bO" AND NOT [bO=l]) OR bO" AND [bO=0]) 



^40 

The above description is of preferred and exemplary embodiment(s) of the present 
invention only and is to enable a full understanding of the invention while not intending to limit 
the invention. The scope of the invention can be ascertained from the following claims: 




Serial No.: 09/477,790 -3- Art Unit: 2123 

Coiif.No.: 9742 

IN THE WRITTEN DESCRIPTION OF THE SPECIFICATION 
Applicant presents a replacement paragraph below indicating the changes with insertions 
indicated by underlining and deletions indicated by strikeouts and/or double bracketing. All 
references below to line numbers only include lines on which text is present. 

Please rewrite the sentence beginning on page 8, line 4 to read as follows: 

A processor 400 further includes a forming device 440 which receives the state variables 
of the real/reverse models from the third store 300 and also receives the transition functions of 
the reverse machine from the fourth store 500 and acts to substitute the state variables of the 
reverse machine with the transition functions of the reverse machine to provide a new set of 
states which represent the pre-image of the reverse system thus the post-image of the second real 
system. 
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Serial No.: 09/477,790 - 8 - Art Unit: 2123 

Conf.No.: 9742 

REMARKS 

In response to the Office Action mailed July 8, 2003, Applicant respectfully requests 
reconsideration. To further the prosecution of the application, amendments have been made in 
the claims, the written description, and the drawings. The application as presented is believed to 
be in allowable condition. 

IN THE DRAWINGS 
In response to ^ 3 of the Office Action, Applicant has modified Figure 3 to address the 
Draflsperson's objection that the lines, numbers and letters were not uniformly thick nor well 
defined. The line quality of Figure 3 has been improved to overcome the Draflsperson's 
rejection. No new matter has been added by this change. Applicant encloses a "Request for 
Corrections, Approval and Entry of Drawings" letter requesting the replacement of Figure 3 with 
the drawing in the Appendix of this response. 

IN THE WRTTTEN DESCRIPTION OF THE SPECIFICATION 
In ^ 4-1 , the Office Action objects to the description at lines 7-9 of page 8. The 
specification has been amended at lines 7-9 of page 8 to remove the reference to a "second 
system" and to clarify that the sentence refers to a relationship between a reverse system and a 
real system. No new matter has been added by this amendment because the specification on 
page 7, lines 8-9 discloses that the pre-image of the reverse system will be the post-image of the 
original system and it is clear from Figure 3 that the original system refers to the real machine 
(i.e., the real system). 

In K 5, the Office Action objects to the incorporation by reference of Applicant's British 
application on page 5, stating that such incorporation is improper because it incorporates 
essential material. Applicant respectftiUy disagrees that any of the incorporated material is 
"essential," as none is necessary to describe or enable the claimed invention, nor to describe the 
best mode. MPEP § 608.01(p)(I)(A). Thus, Applicant's published British Application (No 
9624935.4) is nonessential material and appropriate for incorporation by reference pursuant to 
MPEP § 608.01(p)a)(A). 
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UNITED STATES PATENT AND TRADEMARK OFFICE 



CERTIFICATE OF CORRECTION 



PATENT NO. 

DATED 

INVENTOR(S) 




November 9, 2004 
Geoff Barret 



It is certified that error appears in the above-identified patent and that said Letters Patent is hereby 
corrected as shown below: 

In col. 4, line 7 should read: 

where I is an input and neither TO nor Tl depend on I,— 

In col. 5, line 7 should read: 

— of the reverse system thus the post-image of the real — 
In col. 6, line 7 should read: 

"limit the invention. The scope of the invention can be ascertained from the foHowing- 
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